CVE-2014-3698

CVE-2014-3698 describes an information disclosure vulnerability in the jabber_idn_validate function of the Jabber protocol plugin in Pidgin versions prior to 2.10.10. A remote attacker could exploit this by sending a specially crafted XMPP message, leading to the disclosure of sensitive information from process memory. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required, but only impacts confidentiality. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or inclusion in the KEV catalog, though it received minimal community discussion and media coverage.